Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/77/7eb4e8-bcb1-49ef-b944-53a5af765343/1/y9QcwSHgy2CjqY2_crpNvWPuvp8.mft
File: y9QcwSHgy2CjqY2_crpNvWPuvp8.mft (raw, json)
Hash identifier: 4THTOf7iJkVfFKt1a7nBblcyA4hJXv45FbimLRYHgCI=
Subject key identifier: 76:0D:DC:D7:4D:EB:1B:2E:7D:85:E5:40:AD:A4:CF:77:ED:32:ED:DE
Authority key identifier: CB:D4:1C:C1:21:E0:CB:60:A3:A9:8D:BF:72:BA:4D:BD:63:EE:BE:9F
Certificate issuer: /CN=cbd41cc121e0cb60a3a98dbf72ba4dbd63eebe9f
Certificate serial: 01A0D94D61809FF61E4AEE86D9365BDB5A34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9QcwSHgy2CjqY2_crpNvWPuvp8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/7eb4e8-bcb1-49ef-b944-53a5af765343/1/y9QcwSHgy2CjqY2_crpNvWPuvp8.mft
Manifest number: 127E
Signing time: Fri 25 Sep 2026 16:02:02 +0000
Manifest this update: Fri 25 Sep 2026 16:02:02 +0000
Manifest next update: Sat 26 Sep 2026 16:02:02 +0000
Files and hashes: 1: FSVSgLOIDHB0tEHVWTFzxIji-0o.roa (hash: 9yWQzAfv05KEhodz5VlR9pyMWpBEu5c3XhVdOB7ou5U=)
2: QGfcSBUGzLQb4SyeZopBV9W3h_Y.roa (hash: Se8X87fnlsQ0jSr5BHgV/YmjxoXoJdb5PZSQdKSye9w=)
3: m4rs5cnwWBMbt76R1xpp4mTXG1U.roa (hash: xc1fI9WY5WV26D6LeKOgGd9/V7vnRh4zOrQlPCPXcyA=)
4: y9QcwSHgy2CjqY2_crpNvWPuvp8.crl (hash: +v5ouzQQfR/5TgsyTkIJKF10C1YyKDcZ+/r4R2M5/yg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/7eb4e8-bcb1-49ef-b944-53a5af765343/1/y9QcwSHgy2CjqY2_crpNvWPuvp8.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/7eb4e8-bcb1-49ef-b944-53a5af765343/1/y9QcwSHgy2CjqY2_crpNvWPuvp8.mft
rsync://rpki.ripe.net/repository/DEFAULT/y9QcwSHgy2CjqY2_crpNvWPuvp8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 15:59:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:4d:61:80:9f:f6:1e:4a:ee:86:d9:36:5b:db:5a:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbd41cc121e0cb60a3a98dbf72ba4dbd63eebe9f
Validity
Not Before: Sep 25 16:02:02 2026 GMT
Not After : Sep 26 16:02:02 2026 GMT
Subject: CN=760ddcd74deb1b2e7d85e540ada4cf77ed32edde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:29:cd:3e:f4:27:21:f1:98:87:e2:fc:cd:8d:
78:9f:d5:8e:de:23:9b:a2:e5:4a:d7:fe:6f:f3:7c:
c9:96:44:c5:62:c9:05:c8:cb:38:14:60:f3:66:0e:
b3:2f:17:c0:07:dd:44:ec:3a:e1:09:54:b8:dd:eb:
5d:a8:b4:df:f3:c8:f9:0d:a9:d2:f2:4e:b0:41:ee:
65:62:34:39:c2:cf:fe:ac:93:03:9c:ed:f8:4d:d3:
e3:00:be:fa:55:4a:7c:67:5f:68:7a:4e:43:2b:66:
f7:d8:be:b1:b9:02:e2:41:9d:2d:34:86:6f:c7:d4:
b1:6b:81:58:e6:2d:1a:58:f2:fc:b5:5b:ed:fc:ae:
2d:db:a3:93:e2:7d:9b:ea:8f:6a:62:2b:05:62:2a:
b4:5f:fe:d3:4c:f5:22:7b:78:88:f1:c3:b7:5a:7a:
c0:ea:e4:85:d4:a8:87:f5:67:a4:60:ef:04:fa:86:
7a:56:9e:89:de:e0:20:ff:15:57:c3:ff:3e:ae:04:
c5:2e:fe:ed:8e:11:75:5e:55:26:7c:99:81:1e:0e:
46:9b:41:d1:e9:c8:4f:3c:64:00:b9:c9:f0:d1:03:
83:b5:c1:cc:40:d3:c5:39:9e:e7:df:d5:01:87:40:
23:ad:81:e0:62:d1:4f:de:57:b2:4d:5f:eb:60:c8:
e3:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:0D:DC:D7:4D:EB:1B:2E:7D:85:E5:40:AD:A4:CF:77:ED:32:ED:DE
X509v3 Authority Key Identifier:
keyid:CB:D4:1C:C1:21:E0:CB:60:A3:A9:8D:BF:72:BA:4D:BD:63:EE:BE:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9QcwSHgy2CjqY2_crpNvWPuvp8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/7eb4e8-bcb1-49ef-b944-53a5af765343/1/y9QcwSHgy2CjqY2_crpNvWPuvp8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/7eb4e8-bcb1-49ef-b944-53a5af765343/1/y9QcwSHgy2CjqY2_crpNvWPuvp8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:8e:4c:ea:56:6d:0e:0c:24:d1:91:3d:ac:40:cc:40:b7:1e:
04:fb:26:56:29:77:97:96:31:98:78:9f:98:60:0e:68:8d:a4:
2d:fe:6a:5e:88:8f:ed:7c:90:a7:d1:98:4b:ea:f5:f6:22:b9:
4c:dd:50:93:46:66:da:19:04:a5:d5:d6:bf:60:ca:e0:26:60:
91:ef:94:06:14:33:7f:e5:3e:9b:67:2d:ec:6d:42:37:d0:54:
bd:ea:7e:f4:f0:75:86:a0:74:aa:84:8a:4c:f6:d2:5c:1f:6a:
93:93:d8:43:0a:2b:13:bd:d2:42:2f:35:34:5b:3c:bc:29:76:
f7:ff:05:ee:6a:06:07:88:3c:9a:29:8d:5c:a8:45:3c:08:14:
f7:fe:5d:15:f7:42:b2:a5:57:06:af:61:a3:51:b5:b6:7a:b0:
12:c0:7b:79:2c:ee:5d:26:9f:d2:cb:92:7e:d4:c7:34:67:13:
78:dc:0b:bc:a8:58:ea:13:2b:03:35:56:b4:a2:f4:d2:b4:a0:
97:67:2b:f5:ee:6c:48:ce:5f:a7:1b:b3:18:d1:12:9a:99:5c:
70:bb:65:af:cf:28:db:12:f8:1b:d8:82:61:e8:18:dc:fc:b7:
54:f9:53:ab:05:20:aa:5d:54:75:c9:e7:11:2f:1b:22:b4:38:
98:23:8a:29
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDZTWGAn/YeSu6G2TZb21o0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiZDQxY2MxMjFlMGNiNjBhM2E5OGRiZjcyYmE0ZGJkNjNl
ZWJlOWYwHhcNMjYwOTI1MTYwMjAyWhcNMjYwOTI2MTYwMjAyWjAzMTEwLwYDVQQD
Eyg3NjBkZGNkNzRkZWIxYjJlN2Q4NWU1NDBhZGE0Y2Y3N2VkMzJlZGRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAninNPvQnIfGYh+L8zY14n9WO3iOb
ouVK1/5v83zJlkTFYskFyMs4FGDzZg6zLxfAB91E7DrhCVS43etdqLTf88j5DanS
8k6wQe5lYjQ5ws/+rJMDnO34TdPjAL76VUp8Z19oek5DK2b32L6xuQLiQZ0tNIZv
x9Sxa4FY5i0aWPL8tVvt/K4t26OT4n2b6o9qYisFYiq0X/7TTPUie3iI8cO3WnrA
6uSF1KiH9WekYO8E+oZ6Vp6J3uAg/xVXw/8+rgTFLv7tjhF1XlUmfJmBHg5Gm0HR
6chPPGQAucnw0QODtcHMQNPFOZ7n39UBh0AjrYHgYtFP3leyTV/rYMjjSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHYN3NdN6xsufYXlQK2kz3ftMu3eMB8GA1UdIwQY
MBaAFMvUHMEh4Mtgo6mNv3K6Tb1j7r6fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveTlRY3dTSGd5MkNqcVkyX2NycE52V1B1dnA4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny83ZWI0ZTgtYmNiMS00OWVmLWI5NDQt
NTNhNWFmNzY1MzQzLzEveTlRY3dTSGd5MkNqcVkyX2NycE52V1B1dnA4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny83ZWI0ZTgtYmNiMS00OWVmLWI5NDQtNTNhNWFmNzY1MzQz
LzEveTlRY3dTSGd5MkNqcVkyX2NycE52V1B1dnA4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh45M6lZt
Dgwk0ZE9rEDMQLceBPsmVil3l5YxmHifmGAOaI2kLf5qXoiP7XyQp9GYS+r19iK5
TN1Qk0Zm2hkEpdXWv2DK4CZgke+UBhQzf+U+m2ct7G1CN9BUvep+9PB1hqB0qoSK
TPbSXB9qk5PYQworE73SQi81NFs8vCl29/8F7moGB4g8mimNXKhFPAgU9/5dFfdC
sqVXBq9ho1G1tnqwEsB7eSzuXSaf0suSftTHNGcTeNwLvKhY6hMrAzVWtKL00rSg
l2cr9e5sSM5fpxuzGNESmplccLtlr88o2xL4G9iCYegY3Py3VPlTqwUgql1Udcnn
ES8bIrQ4mCOKKQ==
-----END CERTIFICATE-----
Generated at Fri Sep 25 23:04:33 2026 by rpki-client